3.5 Procuring a Red Teaming Provider

No: 562240000067

Date(g): 13/5/2019 | Date(h): 9/9/1440

Status: In-Force

Effective from 2019-05-13 - May 12 2019
To view other versions open the versions tab on the right

Upon approval of the Red Teaming Provider by the Green Team, the Member Organization should initiate their procurement process. During the procurement of the Red Teaming Provider, the Member Organization should undertake the following activities:

Agreeing on contractual considerations, e.g. Non-Disclosure Agreement (NDA) clauses, the liability for any consequence flowing from the test, and a Letter of Authorization (LOA);
Introduce the Red Team members to the White and Green Team.

Please refer to Appendix A- Requirements for Red Teaming provider, for more details on Red Teaming provider requirements

After the procurement of the Red Teaming Provider, the White Team should start involving the Red Teaming Provider and its identified staff, to ensure their experience and input is fully utilized and that the staff of the Red Teaming Provider is introduced into the business model and services of the Member Organization.